• How to Check for Updates when updates already pending?

    Home » Forums » AskWoody support » Windows » Windows 10 » Questions: Win10 » How to Check for Updates when updates already pending?

    Author
    Topic
    #204023

    I have a few machines in a non-WSUS environment, i.e. Windows Update only.

    My Server 2016 1607 wants to install July cumulative KB4338814 released July 10:

    KB4338814

    However, four known issues in that update have been fixed in cumulative KB438814, released yesterday.

    The whole point of waiting to update is to avoid buggy patches. So how do I force Windows 10/2016 to skip a buggy patch and download the new one? There is no “Check for Updates” button when an update installation is pending.

    Viewing 6 reply threads
    Author
    Replies
    • #204038

      I’d sit on it for now and wait as we are at MS-DEFCON 1 Current Microsoft patches are causing havoc. Don’t patch!

      I’m not up on W10, perhaps someone could assist that is more knowledgeable in this area.

      Keeping IT Lean, Clean and Mean!
    • #204040

      There is also a SSU for 1607. I think KB4132216 (you need to verify).

      But, yes, I would wait a while. There are too many problems out there.

    • #204045

      Thanks. SSU KB4132216 is from May so I assume I have that.

      But the question I’m trying to ask isn’t “do you think I should update now?” I _want_ to update this environment as a test.

      The question is, once Windows 10 or 2016 offers an update, how do I force it to re-detect updates so I can get the latest update?

      • #204049

        Don’t know the answer.
        I would start by hiding it and pulled the trick you did a few months back – pull the plug on the Interned till it gives up, hide it with wushowhide,  There is a DISM command to cleanup pending (somewhere mentioned in the last month on this site. Run Disk Cleanup and clean up System Files = Windows, DO, etc.

        My system is to just try things – not very scientific, but sometimes it works.

        If you are just testing why not download from the Catalog and do a manual? Then the other will go away.

        2 users thanked author for this post.
        • #204056

          Part of the testing is learning how to manage Windows updates in production. Downloading from the catalog is cheating :).

          • #204060

            @mcbsys as @pkcano suggests the catalogue using, for example wusa.exe C:\kb??????? /quiet /norestart but as I note you cant “Cheat” alas, although no one at @askwoody will say a word, we promise. Not dabbled with 2016 Server. Last Serv. I had my paws on was Win2k so my advice is probably no use hope you get it fixed.

            1 user thanked author for this post.
          • #204103

            There are no tricks like those presented here to be used in production.
            Use WSUS or even better SCCM (which include WSUS for updating but has a lot more features) for any production related machines.

            2 users thanked author for this post.
            • #204116

              Sometimes “production” means three desktops at a client site plus a couple remote machines. Typically too small for WSUS.

              I’m also trying a WSUS environment at a small client, not feeling the love on new Win10 1803 installs:  dozens of Office updates “pending download” (per the Win10 machine) with no way to get them to start downloading and installing, WSUS insisted that the May cumulative update is needed even after I approved June.

            • #204125

              At the customer with WSUS, after rebooting the W10 client, the ~50 Office updates that were “pending download’ now show as installed. Never did they actually show “Installing…” in Settings.

          • #204107

            It is far worse than cheating, it is asking for trouble!

      • #204102

        usoclient startscan
        from command line on all Windows 10/2016 except for 1803, unless it was fixed on the last one recently.
        Alternatively use WUMT.

        4 users thanked author for this post.
        • #204277

          Confirmed that usoclient startscan re-runs the WU scan. Thanks! As of 7/18, the updated 7/16 patch is still not being offered by WU.

          Examining the Task Scheduler tasks under Microsoft > Windows > UpdateOrchestrator is instructive. We have

          usoclient StartScan
          usoclient StartDownload
          usoclient StartInstall
          usoclient RefreshSettings
          usoclient ResumeUpdate

          • #204279

            Yes, forcefully resetting all your update settings. It’s shortly going to be ALL MS way or the highway. No stopping the steamroller.

      • #204110

        The sequence that seems to work for me is:

        1. hide the update in wushowhide
        2. disconnect the internet
        3. start the updates that are showing and then close “settings”
        4. stop the windows update service
        5. go back to windows update – I usually find a message there along the lines of “updates couldn’t be installed as your pc was switched off”
        6. reconnect the internet
        7. check for updates (this should also start the windows update service again)

        1 user thanked author for this post.
    • #204051

      Well I may have a partial answer. I have a PowerShell script to check WU directly for available updates. Even though KB4345418 was released yesterday, Windows Update is still only offering KB438814 to this machine. I’ll wait a day and see if that changes.

    • #204054

      Hmm…the Edit button on the main post is gone…. Please note the correct KB number here:

      “However, four known issues in that update have been fixed in cumulative KB4345418, released yesterday.”

      • #204063

        The edit time is limited after post. (Don’t know the exact cut-off). After that, you can’t edit.

        2 users thanked author for this post.
        • #204078

          If you create a post, log out and then log back in, the edit option also disappears.

          Carpe Diem {with backup and coffee}
          offline▸ Win10Pro 2004.19041.572 x64 i3-3220 RAM8GB HDD Firefox83.0b3 WindowsDefender
          offline▸ Acer TravelMate P215-52 RAM8GB Win11Pro 22H2.22621.1265 x64 i5-10210U SSD Firefox106.0 MicrosoftDefender
          online▸ Win11Pro 22H2.22621.1778 x64 i5-9400 RAM16GB HDD Firefox115.0b1 MicrosoftDefender
    • #204104

      @mcbsys
      Other than wasting time, there is no problem in installing both patches in sequence, with reboot between installations. See my post below for ways to work around the issue of not being able to re-scan against WU/MU.
      Even installing the so-called buggy patches is likely not to affect negatively most of the users reading here and this applies to all OSes.
      The recently released patches on July 16 are in the category of Updates (which means Recommended Updates) and not Critical or Security Updates.
      The originally released patches are the Security Updates and they have not been expired, only somehow hidden or throttled until further research from Microsoft I assume.
      Still better to avoid all July patches until the issues are sorted out or at least clarified or unless there are other factors mandating installation, like regulatory compliance.

      3 users thanked author for this post.
      • #204119

        @ch100, thanks for that analysis. I did waste the time this morning to install the July 10 patch on one Server 2016 machine. Fortunately it came back up, but when I read that there are known BSOD fixed in the next patch, I’d rather skip the one with known issues.

        Does WU on 10/2016 ever offer Recommended Updates? I’ve already noticed that it doesn’t offer optional updates like Silverlight, some driver updates, etc. I don’t miss Silverlight, but I do miss the ability to add or remove a check mark to indicate when to install each individual update.  Maybe I need to try WUMT.

        • #204132

          Does WU on 10/2016 ever offer Recommended Updates?

          I don’t think they are called Recommended Updates, but if you check the Catalog, you will notice Security Updates (regular CU, released once a month second Tuesday), Critical Updates (generally SSU) and Updates, which I assumed to be Recommended for the current batch of updates. Otherwise they could be Optional. The interpretation is up to the user/administrator. Other Updates are the out of band CUs, which are more like the Preview Updates and as such should be seen more like Optional, although they are production grade too, at least in intention.

          • #204133

            Whatever they’re called, does W10 or 2016 ever install anything besides Security and Critical through the “standard” Settings > Updates pane?

    • #205009

      Up through yesterday, the only July cumulative update offered by WU for Server 2016 was KB4338814, so I finally applied that to all machines. Today, each machine is offered KB4345418. That’s an extra 1.2GB download, an extra 30-60 minutes, and an extra reboot for each server. In other words, installing KB4338814 was a waste of time because it’s (finally) superseded by KB4345418.

      Sure wish I understood the rhyme and reason of how/when updates are offered on WU.

    Viewing 6 reply threads
    Reply To: How to Check for Updates when updates already pending?

    You can use BBCodes to format your content.
    Your account can't use all available BBCodes, they will be stripped before saving.

    Your information: